Example Investigations

Health Care Fraud Defense

Analyzed a doctor's computer charged in a health care fraud prosecution to determine if the doctor had patient examination reports on the computer.  The government alleged the doctor did not examine the patients.  The computer had been the victim of a ransomware attack encrypting the data, but references to the patient reports were found.  Charges were dismissed against the doctor.

Data Theft Defense

Performed analysis of a Client's personal computer to determine if the Client had committed theft of his former employers proprietary data .

Theft of Employee Information Defense

Analyzed emails and rendered an opinion supporting the Client's contention he was not responsible for targeting a hospital administrator to steal employee financial and personal information.  Client was originally arrested, but the charges were later dismissed.

Theft of Trade Secret Data

Performed analysis of the computer of a former employee who resigned to work for a competitor company.  Analysis determined the former employee had copied the Client's proprietary data, including several formula mixing instructions onto an external hard drive.  After the former employee resigned, he kept possession of the external hard drive containing the formulas.

Preserve and Extract Mobile Phone Data

In both criminal and civil cases, retained to preserve and extract mobile phone data from the Client's personal phone including text messages, call logs, photos, and recorded audio.

Picture Metadata Analysis

In a child custody case, analyzed the embedded metadata from photographs stored on a tablet.  Analysis determined the date and time the photographs were taken as well as the photographs being unaltered.